The modern control plane
Identity
Directories, identity providers, authentication and authorization protocols, conditional access, privileged access and identity governance.
Directories
Active Directory
Microsoft's on premises directory service, providing authentication, authorisation, policy and object management for Windows environments.
ReadLDAP
Lightweight Directory Access Protocol is the query and update protocol for directory services, running on TCP/389 or TCP/636 for LDAPS.
ReadMicrosoft Entra ID
Microsoft's cloud identity and access management service, the identity control plane for Microsoft 365, Azure and thousands of federated applications.
ReadAuthentication
Device Identity
Giving devices verifiable identities so access decisions can consider what the request came from, not just who made it.
ReadKerberos
A ticket based authentication protocol that proves identity to services without sending the password across the network.
ReadMulti Factor Authentication
Requiring two or more independent factors, something you know, have or are, before granting access.
ReadPasswordless & Passkeys
Authentication using device bound cryptographic credentials or biometrics instead of a shared secret.
ReadFederation
Federation & External Identity
Trusting another organisation's identity provider so its users can access your resources without local accounts.
ReadOpenID Connect
An authentication layer on top of OAuth 2.0 that issues signed ID tokens describing who the user is.
ReadSAML 2.0
An XML based standard for exchanging authentication and attribute assertions between an identity provider and a service provider.
ReadSingle Sign On
One authentication event, evaluated by a central identity provider, granting access to many applications through issued tokens or assertions.
ReadGovernance
Privileged Access
Privileged Access Management
Controlling, brokering, recording and time limiting administrative access to the systems that can change everything else.
ReadService & Workload Identity
Non human identities used by applications, scripts and automation, usually the least governed and most over privileged accounts in an estate.
Read